Lucene search
SuseOPENSUSE-SU-2018:4124-1HistoryDec 14, 2018 - 6:10 p.m.
Security update for phpMyAdmin (moderate)
2018-12-1418:10:09
lists.opensuse.org
135
phpmyadmin
security update
local file inclusion
xsrf
csrf
xss
database handling
logging
bug fixes
EPSS
0.242
Percentile
96.7%
This update for phpMyAdmin fixes security issues and bugs.
Security issues addressed in the 4.8.4 release (bsc#1119245):
- CVE-2018-19968: Local file inclusion through transformation feature
- CVE-2018-19969: XSRF/CSRF vulnerability
- CVE-2018-19970: XSS vulnerability in navigation tree
This update also contains the following upstream bug fixes and
improvements:
- Ensure that database names with a dot (‘.’) are handled properly when
DisableIS is true - Fix for message "Error while copying database (pma__column_info)"
- Move operation causes "SELECT * FROM
undefined" error - When logging with $cfg[‘AuthLog’] to syslog, successful login messages
were not logged when $cfg[‘AuthLogSuccess’] was true - Multiple errors and regressions with Designer
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| openSUSE Leap | 42.3 | noarch | phpmyadmin | < 4.8.4-24.1 | phpMyAdmin-4.8.4-24.1.noarch.rpm |
| openSUSE Backports SLE | 15 | noarch | phpmyadmin | < 4.8.4-bp150.3.6.1 | phpMyAdmin-4.8.4-bp150.3.6.1.noarch.rpm |
| openSUSE Leap | 15.0 | noarch | phpmyadmin | < 4.8.4-lp150.2.12.1 | phpMyAdmin-4.8.4-lp150.2.12.1.noarch.rpm |
References
Related
nessus
nessus
openSUSE Security Update : phpMyAdmin (openSUSE-2019-1009)
2019-03-27 00:00:00
openSUSE Security Update : phpMyAdmin (openSUSE-2018-1547)
2018-12-17 00:00:00
GLSA-201904-16 : phpMyAdmin: Multiple vulnerabilities
2019-04-16 00:00:00
myhack58
myhack58
thn
thn
phpMyAdmin Releases Critical Software Update — Patch Your Sites Now!
2018-12-11 14:58:00
openvas
openvas
openSUSE: Security Advisory for phpMyAdmin (openSUSE-SU-2018:4124-1)
2018-12-18 00:00:00
openSUSE: Security Advisory for phpMyAdmin (openSUSE-SU-2018:4124-1)
2018-12-18 00:00:00
Mageia: Security Advisory (MGASA-2018-0486)
2022-01-28 00:00:00
suse
suse
Security update for phpMyAdmin (moderate)
2018-12-14 18:10:36
gentoo
gentoo
phpMyAdmin: Multiple vulnerabilities
2019-04-15 00:00:00
mageia
mageia
Updated phpmyadmin packages fix security vulnerabilities
2018-12-20 23:17:27
osv
osv
phpmyadmin - security update
2019-02-01 00:00:00
CVE-2018-19969
2018-12-11 17:29:00
CVE-2018-19970
2018-12-11 17:29:00
debian
debian
[SECURITY] [DLA 1658-1] phpmyadmin security update
2019-02-01 22:54:43
alpinelinux
alpinelinux
cve
cve
ubuntucve
ubuntucve
github
github
phpMyAdmin CSRF Vulnerability
2022-05-14 01:09:10
phpMyAdmin Cross-site Scripting (XSS) vulnerability
2022-05-14 01:09:10
phpMyAdmin Local file inclusion through transformation feature
2022-05-14 01:07:30
veracode
veracode
Cross-Site Scripting (XSS)
2018-12-12 09:56:01
Information Disclosure
2018-12-12 09:37:25
Cross Site Request Forgery (CSRF)
2018-12-12 09:45:12
nvd
nvd
cvelist
cvelist
checkpoint_advisories
checkpoint_advisories
PhpMyAdmin tbl_replace.php Local File Inclusion (CVE-2018-19968)
2019-02-25 00:00:00
phpMyAdmin Navigation-Tree Stored Cross-Site Scripting (CVE-2018-19970)
2019-11-21 00:00:00
prion
prion
Code injection
2018-12-11 17:29:00
Cross site request forgery (csrf)
2018-12-11 17:29:00
Cross site scripting
2018-12-11 17:29:00
debiancve
debiancve
phpmyadmin
phpmyadmin
XSS vulnerability in navigation tree
2018-12-07 00:00:00
XSRF/CSRF vulnerability in phpMyAdmin
2018-12-07 00:00:00
Local file inclusion through transformation feature
2018-12-07 00:00:00
ubuntu
ubuntu
phpMyAdmin vulnerabilities
2020-11-19 00:00:00
phpMyAdmin vulnerabilities
2021-03-16 00:00:00